Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2BBC4EFB3811EFBCE7EB44762E951A.roa
File: EA2BBC4EFB3811EFBCE7EB44762E951A.roa (raw, json)
Hash identifier: MZXykadZaAkQR4YMPmijHR212zZOVBJXSyYhm02pjoc=
Subject key identifier: 31:57:1A:87:13:C6:1C:EC:C5:05:38:E5:91:3B:EF:A5:CC:6F:CF:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0172F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2BBC4EFB3811EFBCE7EB44762E951A.roa
Signing time: Fri 07 Mar 2025 09:45:34 +0000
ROA not before: Fri 07 Mar 2025 09:45:30 +0000
ROA not after: Tue 08 Jul 2025 09:45:30 +0000
asID: 18013
IP address blocks: 154.204.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94961 (0x172f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 7 09:45:30 2025 GMT
Not After : Jul 8 09:45:30 2025 GMT
Subject: CN=67cac03e-b649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:48:06:44:3a:40:60:d1:c5:b0:06:8f:b5:
b4:13:90:5e:ef:75:20:4b:8b:e9:0d:54:f2:e3:7f:
3a:06:6a:3f:6a:b2:1a:fb:b4:a0:f9:cd:ed:fb:cc:
23:03:91:3e:dc:12:ed:b0:3d:ee:f7:57:8b:d2:2c:
bc:cc:d6:ca:52:d7:b5:fb:fe:10:51:3d:b8:49:17:
bf:3b:07:5f:dd:68:bb:19:4f:13:1d:ae:27:f9:28:
41:0a:03:a2:7d:e0:58:7e:f9:29:bf:8b:60:a0:da:
cb:db:39:e3:a3:15:5c:c8:01:51:b4:c6:27:da:be:
ae:43:98:fa:d6:83:85:11:1f:c3:07:81:44:06:b7:
99:b9:bf:c3:ef:69:6d:9e:21:1b:e8:bc:cf:9e:7b:
23:5b:fe:ae:dd:37:30:df:85:52:fb:4b:63:0e:86:
9e:0c:68:f3:d9:b6:d5:35:47:e5:1b:52:80:eb:7f:
6c:27:8e:6f:52:e5:50:ea:14:1d:ca:6f:26:70:e5:
90:f2:6f:04:2a:13:4d:39:87:60:69:5a:21:74:24:
9f:90:21:e7:03:0f:1a:45:f2:d5:bb:75:72:cd:fc:
d7:8f:1a:16:9b:cc:7d:b8:e2:21:23:70:50:08:4a:
a4:d7:34:e0:97:1f:85:40:79:6d:ea:5c:b0:64:ac:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:57:1A:87:13:C6:1C:EC:C5:05:38:E5:91:3B:EF:A5:CC:6F:CF:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA2BBC4EFB3811EFBCE7EB44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4e:ae:ef:9a:d8:71:2c:90:94:8f:5a:57:3c:f0:66:aa:1a:7e:
76:ad:1e:fc:d5:6c:8f:6e:77:cb:17:25:5e:79:e0:9c:e7:28:
90:f6:59:23:46:17:3b:35:73:5f:4a:29:26:d2:5e:ef:1c:23:
87:61:6a:21:4a:6c:4f:a2:e2:3d:6a:3d:eb:d0:6d:68:90:e4:
2b:a7:ec:9a:f8:66:c6:c6:70:fa:48:31:73:8c:b5:a2:9b:c3:
3b:2b:2d:1d:b1:50:96:7c:a1:2b:f0:67:2f:4e:e6:63:2a:5a:
c7:0f:ec:a4:a0:8b:0a:c1:0a:46:95:2b:79:67:19:af:69:79:
e1:12:14:e3:7c:00:0e:60:89:d3:37:04:5e:55:04:dd:1e:23:
89:80:a2:84:9b:23:2a:70:0a:e0:e3:c7:89:0e:36:40:d0:c5:
eb:81:10:80:e6:30:8f:32:2e:eb:b9:2b:6e:ab:60:83:94:b5:
00:ac:ee:b1:0b:e8:61:8f:cf:31:ee:57:73:f7:f9:4f:20:f0:
0e:c6:eb:2f:30:61:43:e5:0a:a9:0c:dc:79:25:8e:c9:c6:27:
38:95:89:ee:96:7f:75:89:d6:94:5a:eb:23:0e:f2:40:e8:b9:
8c:26:8b:c8:d5:6f:38:e0:52:cd:1f:8a:16:e0:2d:14:de:2a:
c5:0b:f1:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAXLxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzA3MDk0NTMwWhcNMjUwNzA4MDk0NTMwWjAYMRYw
FAYDVQQDEw02N2NhYzAzZS1iNjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAulRIBkQ6QGDRxbAGj7W0E5Be73UgS4vpDVTy4386Bmo/arIa+7Sg+c3t
+8wjA5E+3BLtsD3u91eL0iy8zNbKUte1+/4QUT24SRe/Owdf3Wi7GU8THa4n+ShB
CgOifeBYfvkpv4tgoNrL2znjoxVcyAFRtMYn2r6uQ5j61oOFER/DB4FEBreZub/D
72ltniEb6LzPnnsjW/6u3Tcw34VS+0tjDoaeDGjz2bbVNUflG1KA639sJ45vUuVQ
6hQdym8mcOWQ8m8EKhNNOYdgaVohdCSfkCHnAw8aRfLVu3VyzfzXjxoWm8x9uOIh
I3BQCEqk1zTglx+FQHlt6lywZKyXxQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDFX
GocTxhzsxQU45ZE776XMb8+4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9FQTJCQkM0RUZCMzgxMUVGQkNFN0VCNDQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmsyAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOru+a2HEskJSPWlc88GaqGn52rR781WyPbnfLFyVeeeCc5yiQ9lkj
Rhc7NXNfSikm0l7vHCOHYWohSmxPouI9aj3r0G1okOQrp+ya+GbGxnD6SDFzjLWi
m8M7Ky0dsVCWfKEr8GcvTuZjKlrHD+ykoIsKwQpGlSt5ZxmvaXnhEhTjfAAOYInT
NwReVQTdHiOJgKKEmyMqcArg48eJDjZA0MXrgRCA5jCPMi7ruStuq2CDlLUArO6x
C+hhj88x7ldz9/lPIPAOxusvMGFD5QqpDNx5JY7Jxic4lYnuln91idaUWusjDvJA
6LmMJovI1W844FLNH4oW4C0U3irFC/Fx
-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:12 2025 by rpki-client